Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File:                     AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier:          j24nSWEH1/Tt9u+pzhB2/+pW6BtsCvo1vJPjxPPj6Ts=
Subject key identifier:   E7:C7:73:35:BE:5D:0E:60:30:82:90:C2:5F:2C:27:2E:C2:D7:EC:78
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer:       /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial:       078B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number:          0786
Signing time:             Thu 30 Jan 2025 21:16:25 +0000
Manifest this update:     Thu 30 Jan 2025 21:16:25 +0000
Manifest next update:     Thu 06 Feb 2025 21:16:25 +0000
Files and hashes:         1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: etI8+0Ud9qWDhEKtO0QLrGmyyqMeaC+4uSAYtWy/DoQ=)
                          2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: OSuo22pCpFQlpJJN8xkAzm6P90bv2Mjg2FXUApiRfIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
        Validity
            Not Before: Jan 30 21:16:25 2025 GMT
            Not After : Feb  6 21:16:25 2025 GMT
        Subject: CN=679bec29-b98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:e6:1a:95:e4:f3:8b:5a:6d:60:06:dd:53:
                    2b:a1:fe:f5:b2:c3:82:22:d6:ee:38:31:7f:c2:1d:
                    72:de:c9:77:f0:2a:3e:4f:d5:62:e9:55:9a:16:7f:
                    ce:cd:65:35:4b:7f:27:44:7c:3c:a4:c7:0c:ff:f4:
                    91:b3:10:fe:38:c4:e0:c1:5f:21:2b:d7:aa:ae:00:
                    99:08:cb:6a:49:68:ad:8c:25:22:ad:0d:31:4e:ce:
                    bf:35:73:18:37:0a:a7:6c:78:00:25:4f:d8:6c:02:
                    8c:44:d1:63:6d:bd:43:f9:54:6d:a8:ea:59:49:4c:
                    39:ef:3e:b3:1d:7c:25:3d:10:20:e4:8d:b1:1f:90:
                    ac:4c:5c:30:f6:9e:85:67:6e:c4:5c:cb:88:b2:ca:
                    1c:44:0d:5d:40:b4:bb:e7:e4:ce:b3:4c:e9:21:ef:
                    a2:a4:79:61:c0:59:76:d0:cb:a8:13:22:b0:33:8c:
                    16:39:1d:2c:38:ba:6e:b2:de:be:b1:67:a2:55:00:
                    e1:68:ac:a3:3a:e4:7e:80:3c:ef:a8:0a:27:e3:49:
                    13:0d:41:95:6d:db:9e:34:b3:17:2e:76:a2:77:4a:
                    06:d9:36:2c:8b:81:e4:cd:fa:68:68:7f:bf:3f:18:
                    8c:e0:5b:62:a3:83:8d:05:46:48:18:97:df:2a:35:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:73:35:BE:5D:0E:60:30:82:90:C2:5F:2C:27:2E:C2:D7:EC:78
            X509v3 Authority Key Identifier:
                keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:74:16:12:2f:92:3b:d1:75:9c:7c:58:0b:3e:c7:a7:51:0c:
         45:cd:45:1d:df:e6:a4:f6:b4:a3:00:8c:d7:fb:85:77:48:30:
         ae:2b:4e:95:ac:1d:b9:ca:26:58:b2:b8:bb:c5:0a:73:04:7e:
         88:7f:03:d8:7f:21:37:e0:c7:a7:28:66:ba:b0:4a:15:7b:b1:
         c7:1a:11:f4:74:90:d5:a4:cd:bc:a5:e1:6f:55:d8:62:d3:a6:
         53:88:d3:cc:58:e9:42:df:08:c2:80:44:0b:a5:2b:ac:7f:fb:
         6e:a3:35:36:40:39:98:95:90:e8:b9:c5:2e:f6:b3:65:df:79:
         e4:e9:89:63:7e:c8:e1:e4:49:45:2c:01:47:36:b2:1c:28:1c:
         bb:72:6b:9b:d2:a3:2e:f1:c6:00:97:0d:d6:b6:31:bb:a4:e1:
         cf:73:3e:b8:22:87:57:64:7c:c2:79:0f:55:1c:a0:28:34:77:
         b6:89:4b:fb:78:f1:8b:44:7e:ce:84:ba:be:da:0e:90:05:7d:
         60:22:a2:8e:03:7a:56:c6:35:14:e6:84:f2:15:69:3f:bc:35:
         f8:fa:05:dc:d3:82:18:a0:ca:5a:73:c3:c6:25:6b:98:19:9b:
         c0:c7:52:5c:f1:f2:84:76:c4:fa:4e:21:05:e1:30:36:ad:cd:
         79:07:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:22 2025 by rpki-client